Methods, apparatuses, system and computer programs for key update
View Patent ↗It is disclosed a method comprising monitoring validity of limited-validity key information, acquiring, from a network entity upon invalidity of the limited-validity key information, limited-validity transaction identification information based on unlimited-validity identification information identifying a terminal, generating new limited-validity key information based on the acquired limited-validity transaction identification information, and transmitting the acquired limited-validity transaction identification information to a network element.
1. An apparatus comprising a user equipment, the apparatus comprising:
at least one processor; and
at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least:
monitor a validity of a multimedia broadcast multicast service user key, wherein the multimedia broadcast multicast service user key is associated with a bootstrapping transaction identifier; and
when the monitoring of the validity of the multimedia broadcast multicast service user key indicates that the multimedia broadcast multicast service user key is invalid:
acquire, from a bootstrapping server function, another bootstrapping transaction identifier, wherein the acquiring is based at least on an international mobile subscriber persistent identity identifying the apparatus;
generate, based at least on the other bootstrapping transaction identifier, another multimedia broadcast multicast service user key; and
transmit, to a network element comprising a network application function, an indication for the network application function to acquire the other multimedia broadcast multicast service user key from the bootstrapping server function.
2. The apparatus according to claim 1 , wherein the indication is transmitted in a portion of a registration message, and wherein the indication comprises the other bootstrapping transaction identifier.
3. The apparatus according to claim 2 , wherein the transmission of the other bootstrapping transaction identifier enables the network application function to acquire the other multimedia broadcast multicast service user key from the bootstrapping server function.
4. The apparatus according to claim 1 , wherein the indication is transmitted as a register command, wherein the indication comprises an absence of a multimedia broadcast multicast service key from the register command, and wherein the absence of the multimedia broadcast multicast service key indicates a service continuity.
5. The apparatus according to claim 4 , wherein the multimedia broadcast multicast service key comprises limited-validity service key information.
6. The apparatus according to claim 1 , wherein the apparatus is further configured to at least:
establish a limited-validity master key information; and
derive the other multimedia broadcast multicast service user key based at least in part on the established limited-validity master key information.
7. The apparatus according to claim 1 , wherein the the multimedia broadcast multicast service user key and the other multimedia broadcast multicast service user key comprise limited-validity key information.
8. The apparatus according to claim 1 , wherein the bootstrapping transaction identifier and the other bootstrapping transaction identifier comprise limited-validity transaction identification information.
9. The apparatus according to claim 1 , wherein the international mobile subscriber persistent identity comprises unlimited-validity identification information.
10. The apparatus according to claim 1 , wherein the network element further comprises a broadcast-multicast service center.
11. The apparatus according to claim 1 , wherein at least one of the bootstrapping server function and the network application function are implemented in a semiconductor device.
12. The apparatus according to claim 1 , wherein the apparatus is configured to receive data from the network application function.
13. The apparatus according to claim 12 , wherein the apparatus is further configured to:
decrypt, based at least on the multimedia broadcast multicast service key, the data received from the network application function, while the multimedia broadcast multicast service key is valid.
14. The apparatus according to claim 12 , wherein the data received from the network application function is decrypted based at least the other multimedia broadcast multicast service key, subsequent to the multimedia broadcast multicast service key becoming invalid.
15. A non-transitory computer-readable medium encoded with instructions that, when executed by at least one processor, perform at least the following:
monitoring, at a user equipment, a validity of a multimedia broadcast multicast service user key, wherein the multimedia broadcast multicast service user key is associated with a bootstrapping transaction identifier; and
when the monitoring of the validity of the multimedia broadcast multicast service user key indicates that the multimedia broadcast multicast service user key is invalid:
acquiring, from a bootstrapping server function, another bootstrapping transaction identifier, wherein the acquiring is based at least on an international mobile subscriber persistent identity identifying the apparatus;
generating, based at least on the other bootstrapping transaction identifier, another multimedia broadcast multicast service user key; and
transmitting, to a network element comprising a network application function, an indication for the network application function to acquire the other multimedia broadcast multimedia user key from the bootstrapping server function.